Privacy Notice - General Regulation for the Protection of Personal Data - "Regulation"

The company Ducati Motor Holding S.p.A. ("Ducati") as data controller informs you of the following regarding the processing of your personal data pursuant to art. 13 of EU Regulation 2016/679 on the protection of personal data ("Regulation").

1. Purposes of data processing and consequences in case of refusal to provide your personal data
Ducati processes the personal data that you provide when you register for test ride events to ride our motorcycles and the data collected during such tests (hereinafter referred to as "Test Rides").
Test Rides can be organised by a Ducati Motor Holding division during special events or track riding courses can be organised as part of DRE -Racetrak Academy, DRE - Road Academy e DRE - Rookie Academy. Ducati processes your personal data for the purposes described below.

a) Purposes necessary for the management of your participation in our Test Rides
Ducati processes your personal data to the extent necessary to manage your participation in the Test Rides, including the payment profile.
Ducati also processes your personal data to comply with legal and regulatory obligations connected with the management of the Test Rides (for example concerning administrative and accounting matters) and to exercise legal claims.
For these purposes, we process such data as name and surname, gender, e-mail, telephone number, date of birth, data relating to residence/domicile (city, post code, country, province/region), driver's licence data.
For the purposes mentioned above, you need to provide your personal data. Your refusal to do so will prevent you from taking part in our Test Rides.

b) Additional purposes: marketing - profiling - promotion of Ducati's image
With your optional consent, Ducati will use your data for marketing purposes, i,.e. to send you promotional newsletters, commercial or advertising communications on the sales and promotional initiatives of Ducati, its sales and service network and its partners, for direct sales, market research and satisfaction surveys, as well as for statistical analyses with data in aggregate and anonymous form.
Marketing activities are carried out via e-mail, newsletters, live operator telephone calls, SMS and MMS messages, chats, instant messaging, social networks and conventional mail. We may also be sending invitations to events organised by Ducati or in which Ducati participates. You may indicate your preferred method of contact among those listed above and may refuse to receive promotional communications through any one or all or of the channels of communication mentioned above at any time.
With your consent, which is optional, Ducati uses your personal data for profiling activities by collecting information on your preferences, habits, lifestyle, information on your interaction with Ducati, as well as the details of your purchases to create group and individual profiles ("profiling") and, if you have given consent for marketing activities, also sending you personalized promotional communications and offers. For these profiling activities we collect also the following information: information we obtain from comparison between information we have with data generally available to the public, for example social network profiles that you decided to make publicly available; information collected through cookies and other tracking technologies on the Site (please refer to our Cookie Policy, available on the home page of the Site (https://www.ducati.com/it/it/home); information collected through data detection systems on your motorcycle - as applicable and only in compliance with the Regulation. Tailored marketing activities are carried out by e-mail (newsletters), telephone, SMS and MMS messages, chats, banners on website, instant messaging, social networks and conventional mail, including invitations to events.
The provision of data for the marketing and profiling purposes indicated above is optional and the possible failure to provide such data will not have any consequences on the possibility for you to buy Ducati products and to receive the information, material, and services that you require, including post sale services. To verify or modify your preferences you may at any moment access your profile page at My Ducati, in the section Privacy Management.
During the Test Rides and in particular on the occasion of the DRE events, Ducati takes photographs and records videos using film cameras/cameras/video cameras or other similar tools. With your optional consent, Ducati may thus collect personal data about you, such as your image, voice, your experience during the DRE (such data is hereinafter collectively referred to as "Images").
The Images, alone and/or in combination with other images, are used by Ducati for commercial purposes and to promote its corporate image by means of dissemination, during and after the DRE initiative, through such means as Ducati may deem suitable, such as conventional press media and also through digital means - for example dissemination through Internet sites, apps, Ducati blogs or Ducati social media accounts. More information is contained in the Authorization form for the use of your image that will be given to you on the day of the Event.

Providing your personal data for marketing and profiling purposes and for the purpose of promoting the Ducati's image as indicated above is optional and your refusal to do so will not affect your ability to take part in the Test Rides.


2. Method of processing and legal bases for processing
Ducati will process you personal data with and without the aid of electronic means, based on logics and procedures consistent with the purposes specified below and in compliance with the Regulations, including the aspects of confidentiality and security.
You can provide the data when you register for our Test Rides, or the data may be obtained during visits with our dealers and resellers, or provided during interaction with our digital initiatives (websites, apps, blogs, social media), or during events organised by Ducati or in which
Ducati participates. In compliance with the Regulations, your personal data which may be obtained from you or authorised third parties is used to update and rectify the information collected previously.

Ducati processes your personal data on the basis of the following criteria of legitimacy:
  • your consent
  • Ducati's legitimate interest in carrying out commercial activities;
  • fulfilling obligations arising out of a contract between you and Ducati;
  • the fulfilment of legal obligations.

3. Recipients of your personal data
Personal data is accessible to our duly authorised personnel (e.g. personnel of departments in charge of Test Rides, DRE, Sales & Marketing, CRM, Service, IT) as needed, and is disclosed to third parties in the following cases:
(i) when disclosure is required by applicable laws and regulations with respect to legitimate third-party recipients of information like authorities and public bodies for their respective institutional purposes. As provided for in the loan-for-use agreement concerning the motorcycle, your personal data will be disclosed by Ducati to insurance companies, police forces or other public authorities in relation to any request, dispute, sanction or measure connected with the operation of the motorcycle during the time the motorcycle is or has been in your custody and available to you under the loan-for-use agreement, including for instance infringements of road traffic regulations in Italy and abroad;
(ii) communication to third parties in the event of extraordinary transactions (e.g. mergers, acquisitions, sale of business branch, etc.).
Your personal data is also shared with our service providers, e.g. for technical and organisational services expedient to the purposes specified above, such as independent contractors, even with associates, e.g. for shipments, processing of payments, companies specialising in market research and data processing, advertising companies, etc. We provide these entities with only the data necessary to perform the agreed services and they act as Data Processors, based on the instructions received from Ducati.
Finally, in order to provide you with the Ducati products and services you have requested (e.g. to ensure that you may obtain the same benefits worldwide), other companies in the Ducati Group, importers, dealers and our commercial partners may access your personal data under applicable privacy law.
Ducati will not disclose your data to third parties in order for them to use it for their own marketing or profiling purposes.

4. Transfer of personal data outside the European Union
Some of the entities or individuals mentioned above may be located outside the European Union, in countries that do not provide an adequate level of protection for personal data up to the standards established in the Regulations. Ducati takes the necessary precautions for a legitimate transfer of data (e.g. through the implementation of Standard Contractual Clauses approved by the European Commission). You may request information on the cross-border transfer of your personal data at any time by contacting Ducati or Ducati's Data Protection Officer at the addresses provided below.

5. Storage of personal data
Your personal data are kept by Ducati for the time being strictly necessary to pursue the purposes for which they are collected. Legal regulations impose obligations to keep documents for accounting and administrative purposes that according to the ordinary period of limitation of the contractual actions we will cancel after 10 years, starting from the moment of contract termination.
You may at any time ask us to erase the data for such purposes and deny consent to processing the data for marketing purposes.
Once the retention period has expired, personal data will deleted or made anonymous. Upon request to the Data Controller and Data Protection Officer, the Data Subject may receive detailed information on the storage times of personal data processed by Ducati pursuant to the Regulation.

6. Data Controller and Data Protection Manager
The Data Controller is Ducati Motor Holding S.p.A., with registered offices at Via Cavalieri Ducati, 3 - 40132 Bologna, Italy. The Data Protection Officer is domiciled at the registered offices of the Data Controller and can be contacted at the following e-mail address: : privacy@ducati.com.

7. Your rights
You can contact Ducati as the Data Controller or Data Protection Manager at the above addresses to get an updated list of our data processors (i.e. our service providers), of the parties to whom the data are disclosed and to exercise the following rights as per art. 15 et seq. of the Regulation; to get access to your data to verify their existence and other information related to them, to obtain their rectification or cancellation, to request data portability, to obtain limitation of processing and to lodge a claim to the Supervisory Authority (the Authority for the Protection of Personal Data).
In addition, you may, at any time, object to the processing of your personal data processed for direct marketing purposes and, if required by a particular situation, you may object to the processing of your personal data on the basis of Ducati's legitimate interest unless Ducati has prevailing legitimate reasons for proceeding with processing (e.g. the exercise or defence of a right in court).